last executing test programs: 16m32.459626473s ago: executing program 0 (id=1479): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161142, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x4, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r4, 0x0, 0x0) 16m26.073480177s ago: executing program 0 (id=1498): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x5, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000001c0)={0x7, 0x3, 0x1, {0x6f7, 0x2, 0xbbd, 0xac66}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) io_uring_enter(r4, 0x1678, 0xde8f, 0x2, 0x0, 0x0) pselect6(0xa2, &(0x7f0000000000)={0x80000000000, 0x40000000002, 0xbb, 0x8000e, 0x5, 0x0, 0x100, 0x9}, 0x0, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580), 0x4) r5 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="00231500000011304269e21acff08f8b5f2b390669f8faac5a398dd6b49b3ce3d6b840dbc924ecfb4cfff53b182c25a666a83cdc902e8d7c09689c0fa1113e79c515597283565256bfc2243366607168070beca168befba3a20fca3d80a0ba6579da627b522e9a4440f8881c3449873edad7639ab816afcf1abbfcff44c19423f3abc71e48942263c0747c7bdaf031d24566002babd0507108d32ddcb4ab551a42"], 0x0, 0x0, 0x0}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00150e0000009b88b3e608adf62be80000000000"], 0x0, 0x0, 0x0, 0x0}) 16m22.729077806s ago: executing program 0 (id=1501): syz_open_dev$cec(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x3, 0xa) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e7f035a000000"], 0x10}}], 0x1, 0x400c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 16m21.76261539s ago: executing program 0 (id=1502): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(r2, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x0}, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 16m17.240189356s ago: executing program 0 (id=1510): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 16m14.91789817s ago: executing program 0 (id=1513): r0 = socket$kcm(0xa, 0x2, 0x73) openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000020c0), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70dffcdbdf253100000008000200", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x80044) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001640)='./file0/file0\x00', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="11", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000033380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa53, &(0x7f0000000bc0)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {0x0}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc708", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 15m59.167359501s ago: executing program 32 (id=1513): r0 = socket$kcm(0xa, 0x2, 0x73) openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000020c0), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70dffcdbdf253100000008000200", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x80044) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001640)='./file0/file0\x00', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="11", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000033380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa53, &(0x7f0000000bc0)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {0x0}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc708", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 2m48.930026174s ago: executing program 1 (id=3361): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 2m48.599965739s ago: executing program 1 (id=3363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312401000000000014002b80084c0001", @ANYRES32, @ANYBLOB="080003000200000008001b0000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2m47.947642219s ago: executing program 1 (id=3367): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) write$proc_mixer(r2, &(0x7f00000016c0)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202743442043617074757265272030303030303030303030fc3030303030303030300a494741494e2027"], 0x178) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) dup3(r3, r2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="671401030000000000000000000000000000000000000001385900000000000000000000000000010000e4ffffff00000000000000000000000000000000000000eeffff0a0101022001000000000000000000000000000200000000000000000000000000000001ff010000000000000000000000000001fe880000000000000000000000000101fe80000000000010000000000000000dfc010000000000000000c0f4491a4325bdb772b81c1763b09416d08a1093220e62a99ee55d6ef07182fe66731e46b877fd03e6c289757bbfac00828adc3d1d74be119571c165824f5207ade300441a5d354591f682a6220ce46b31e123697ac5d4c4194e251e81b9f0bd9dd74964700d76db76f68310343a12e128df12ebc5277233d386ca42dae0ceb3a2a17719649271c75df7b35e3207fabbb1395a5106bb86f3ba037fd19d7505adc396f9cb0237bc491a8eeb4a3bf4e432"], 0xa8) 2m45.934463498s ago: executing program 1 (id=3372): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m43.218946978s ago: executing program 1 (id=3384): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0xfff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x24, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {0xffe0, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xd}}, @TCA_RATE={0x6, 0x5, {0x0, 0x10}}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x5}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 2m42.392500831s ago: executing program 1 (id=3387): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() sync() sync() sync() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 2m26.8484799s ago: executing program 33 (id=3387): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() sync() sync() sync() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 10.235931169s ago: executing program 4 (id=3975): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0102, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 9.259837523s ago: executing program 4 (id=3981): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c054) bind$inet(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r2) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000500)={0x87, 0x6, 0x0, 0x1, 0x0, [@mcast2, @private1, @mcast2]}, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x86) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x0) 8.443878215s ago: executing program 4 (id=3984): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 6.557908153s ago: executing program 3 (id=3987): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_clone(0x21209000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x75b5, &(0x7f0000000380)={0x0, 0x8b15, 0x8, 0x7ffe, 0x2d9}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.12614105s ago: executing program 3 (id=3992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_usb_connect(0x2, 0xb7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x12, 0x1, 0x0, 0x40, 0x0}) 5.574158768s ago: executing program 6 (id=3995): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = socket(0xa, 0x1, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x4, 0x0, &(0x7f0000003c00)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2000e000}, 0x11ea1afab7de4f4e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x10) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 5.41972517s ago: executing program 2 (id=3996): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 5.003841136s ago: executing program 4 (id=3997): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 4.903681177s ago: executing program 5 (id=3998): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x135002, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)=@multiplanar_overlay={0x7, 0x1, 0x4, 0x1000, 0x1000, {0x77359400}, {0x2, 0xc, 0x81, 0x12, 0x82, 0x9, "359a8020"}, 0x2, 0x3, {0x0}, 0x8}) 4.648501452s ago: executing program 6 (id=3999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) 4.645193452s ago: executing program 2 (id=4000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x20000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) 3.301116931s ago: executing program 2 (id=4001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 3.300734501s ago: executing program 4 (id=4002): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x79f4, 0x8ba, 0x2, {0x6, @pix_mp={0x6, 0x0, 0x33524742, 0x6, 0x7, [{0x3, 0x8001}, {0x10000, 0x6}, {0x2, 0x7}, {0x2, 0x200}, {0x9, 0xfffffff7}, {0xe, 0x3}, {0x0, 0x5}, {0x0, 0x8001}], 0x7, 0x10, 0x7, 0x1, 0x1}}, 0x40004}) 3.299266781s ago: executing program 5 (id=4003): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 3.203972973s ago: executing program 5 (id=4004): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.191918043s ago: executing program 4 (id=4005): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) kcmp(r3, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 3.188310763s ago: executing program 6 (id=4006): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) unlinkat(0xffffffffffffffff, 0x0, 0x200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2}) 3.153807493s ago: executing program 5 (id=4007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100), 0x0) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200, &(0x7f0000000180)={0xa, 0x4e21, 0x3, @remote, 0x4}, 0x1c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0xe, 0x42000) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa02000d0000006023000052313cd1476f7c7b27034c37002ea5d4b374266cfc2314fa99"], 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) 3.042852395s ago: executing program 2 (id=4008): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0xf000, {{}, {0x0}, 0x0, 0x0, 0x21}}], 0x48}, 0x0) 2.871668588s ago: executing program 3 (id=4009): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a3000000000090001007379"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb250d6707540288a83e0088644700feff44080021"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6c8b2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) add_key(0x0, 0x0, &(0x7f00000000c0)="00fe0000e6f8", 0x6, 0xfffffffffffffffc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)}, {0x0}], 0x2}, 0x84) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) dup(r4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r7, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 2.096278369s ago: executing program 6 (id=4010): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = socket(0xa, 0x1, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x4, 0x0, &(0x7f0000003c00)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2000e000}, 0x11ea1afab7de4f4e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x10) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 2.002579731s ago: executing program 2 (id=4011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000) read$alg(r2, &(0x7f0000000040)=""/39, 0x27) 1.951757402s ago: executing program 3 (id=4012): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x8, 0x3}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4000040, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.138341573s ago: executing program 6 (id=4013): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 1.113175543s ago: executing program 2 (id=4014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.032718804s ago: executing program 3 (id=4015): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) r1 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 947.933756ms ago: executing program 5 (id=4016): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x7e4b8e1e, 0x2, 0x101}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x4f, 0x1, 0x9}}) 947.650446ms ago: executing program 6 (id=4017): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 940.796656ms ago: executing program 3 (id=4018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) 0s ago: executing program 5 (id=4019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_usb_connect(0x2, 0xb7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x12, 0x1, 0x0, 0x40, 0x0}) kernel console output (not intermixed with test programs): starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1245.481898][T15964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1245.519010][T15971] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1245.525554][T15971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1245.533310][T15971] vhci_hcd vhci_hcd.0: Device attached [ 1245.624598][T15964] UDF-fs: unknown compression code (0) [ 1245.689099][T15964] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1245.789808][T15964] UDF-fs: unknown compression code (0) [ 1245.816280][T15980] loop5: detected capacity change from 0 to 64 [ 1245.849115][ T4273] usb 35-1: new low-speed USB device number 9 using vhci_hcd [ 1245.997130][T15973] vhci_hcd: connection reset by peer [ 1246.008532][ T9962] vhci_hcd: stop threads [ 1246.016665][ T9962] vhci_hcd: release socket [ 1246.018128][T15980] Trying to free block not in datazone [ 1246.072970][ T9962] vhci_hcd: disconnect device [ 1246.128348][T15980] Trying to free block not in datazone [ 1246.165422][T15980] Trying to free block not in datazone [ 1246.176584][T15988] fuse: Unknown parameter 'grou00000000000000000000' [ 1246.960323][T15980] Trying to free block not in datazone [ 1247.852936][T15980] minix_free_block (loop5:6): bit already cleared [ 1247.946083][T15980] Trying to free block not in datazone [ 1248.096261][T15980] Trying to free block not in datazone [ 1248.207780][T16002] loop1: detected capacity change from 0 to 164 [ 1248.219396][ T4249] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1248.479267][ T4249] usb 3-1: Using ep0 maxpacket: 16 [ 1248.639530][T14788] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1248.700485][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1248.767128][T16007] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1249.583320][T16005] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1249.589863][T16005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1249.599693][T16005] vhci_hcd vhci_hcd.0: Device attached [ 1249.606784][T16006] vhci_hcd: connection closed [ 1249.607717][ T9962] vhci_hcd: stop threads [ 1249.715467][ T9962] vhci_hcd: release socket [ 1249.720276][ T9962] vhci_hcd: disconnect device [ 1249.749070][T14788] usb 6-1: device descriptor read/64, error -71 [ 1249.899889][ T4249] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1249.922976][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.962141][ T4249] usb 3-1: Product: syz [ 1249.966329][ T4249] usb 3-1: Manufacturer: syz [ 1249.986456][ T4249] usb 3-1: SerialNumber: syz [ 1250.018539][ T4249] usb 3-1: config 0 descriptor?? [ 1250.023806][T14788] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1250.081193][ T4249] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1250.105089][ T4249] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1250.218969][T14788] usb 6-1: device descriptor read/64, error -71 [ 1250.340077][T14788] usb usb6-port1: attempt power cycle [ 1251.029690][ T4273] vhci_hcd: vhci_device speed not set [ 1251.209111][ T4249] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1251.239106][T14788] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1251.590309][T14788] usb 6-1: device descriptor read/8, error -71 [ 1252.624453][T16020] loop5: detected capacity change from 0 to 2048 [ 1252.835641][ T4249] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1252.845096][ T4249] em28xx 3-1:0.0: board has no eeprom [ 1252.867292][T16020] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1252.898976][T16020] NILFS (loop5): mounting unchecked fs [ 1252.914555][ T5319] udevd[5319]: incorrect nilfs2 checksum on /dev/loop5 [ 1252.994585][ T5319] udevd[5319]: incorrect nilfs2 checksum on /dev/loop5 [ 1253.026675][T16020] NILFS (loop5): recovery complete [ 1253.053179][T16030] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1253.068058][T16029] loop3: detected capacity change from 0 to 2048 [ 1253.111565][T16029] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1253.133805][T16029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1253.146890][T16029] UDF-fs: unknown compression code (0) [ 1253.156128][T16029] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1253.178011][T16029] UDF-fs: unknown compression code (0) [ 1253.504896][T16042] loop3: detected capacity change from 0 to 256 [ 1253.533851][T16039] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1253.540483][T16039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1253.549349][T16039] vhci_hcd vhci_hcd.0: Device attached [ 1253.679649][T16035] loop1: detected capacity change from 0 to 2048 [ 1253.879874][T16035] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1253.908907][ T4246] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1253.919338][T15996] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1254.028944][ T4249] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1254.072590][ T4249] em28xx 3-1:0.0: dvb set to bulk mode. [ 1254.101359][T16035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1254.256688][T14787] em28xx 3-1:0.0: Binding DVB extension [ 1254.335017][T16040] vhci_hcd: connection reset by peer [ 1254.341057][ T9962] vhci_hcd: stop threads [ 1254.345490][ T9962] vhci_hcd: release socket [ 1254.445442][ T9962] vhci_hcd: disconnect device [ 1254.533801][T16035] UDF-fs: unknown compression code (0) [ 1254.665538][T16035] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1254.685818][ T23] usb 3-1: USB disconnect, device number 74 [ 1254.736676][ T23] em28xx 3-1:0.0: Disconnecting em28xx [ 1254.862304][T16035] UDF-fs: unknown compression code (0) [ 1254.874297][T16047] fuse: Unknown parameter 'grou00000000000000000000' [ 1254.931117][T14787] em28xx 3-1:0.0: Registering input extension [ 1254.937496][ T23] em28xx 3-1:0.0: Closing input extension [ 1254.973620][ T23] em28xx 3-1:0.0: Freeing device [ 1255.096722][T16050] loop3: detected capacity change from 0 to 2048 [ 1255.197711][T16050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1255.476116][T16058] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 1256.211270][ T9962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.389244][ T9962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.570518][ T9962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.855423][ T9962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.350252][T16061] chnl_net:caif_netlink_parms(): no params data found [ 1257.380751][ T9962] tipc: Disabling bearer [ 1257.386651][ T9962] tipc: Left network mode [ 1257.549017][ T21] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1257.651362][T16061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.676356][T16061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.706820][T16061] device bridge_slave_0 entered promiscuous mode [ 1257.720374][T16061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.751192][T16083] loop2: detected capacity change from 0 to 2048 [ 1257.764346][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.772039][ T21] usb 5-1: device descriptor read/64, error -71 [ 1257.802357][T16061] device bridge_slave_1 entered promiscuous mode [ 1257.808478][T16083] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1257.852576][ T4659] udevd[4659]: incorrect nilfs2 checksum on /dev/loop2 [ 1257.866091][T16083] NILFS (loop2): mounting unchecked fs [ 1257.914463][T16061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.947222][T16083] NILFS (loop2): recovery complete [ 1257.965012][T16061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.009350][T16089] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1258.079098][ T21] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1258.143553][ T5201] Bluetooth: hci1: command 0x0409 tx timeout [ 1258.207568][T16061] team0: Port device team_slave_0 added [ 1258.333901][ T21] usb 5-1: device descriptor read/64, error -71 [ 1258.350332][T16061] team0: Port device team_slave_1 added [ 1258.468049][T16061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.485323][ T21] usb usb5-port1: attempt power cycle [ 1258.513836][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.543100][T16061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.558060][T16061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.565174][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.635673][T16061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.695243][T16061] device hsr_slave_0 entered promiscuous mode [ 1258.718339][T16061] device hsr_slave_1 entered promiscuous mode [ 1258.778627][T16061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.029062][ T21] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1259.119087][ T4246] vhci_hcd: vhci_device speed not set [ 1259.149310][T16061] Cannot create hsr debugfs directory [ 1259.854895][ T21] usb 5-1: device descriptor read/8, error -71 [ 1259.937766][T16110] fuse: Unknown parameter 'grou00000000000000000000' [ 1259.961128][T16108] loop3: detected capacity change from 0 to 64 [ 1260.042829][T16108] Trying to free block not in datazone [ 1260.048421][T16108] Trying to free block not in datazone [ 1260.129130][ T21] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1260.159112][T16108] Trying to free block not in datazone [ 1260.164716][T16108] Trying to free block not in datazone [ 1260.219115][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 1260.243127][T16108] minix_free_block (loop3:6): bit already cleared [ 1260.389013][ T21] usb 5-1: device not accepting address 69, error -71 [ 1260.425203][ T21] usb usb5-port1: unable to enumerate USB device [ 1260.865543][ T9962] device hsr_slave_0 left promiscuous mode [ 1260.931167][T16108] Trying to free block not in datazone [ 1260.939328][T16108] Trying to free block not in datazone [ 1261.048976][ T9962] device hsr_slave_1 left promiscuous mode [ 1261.076088][ T9962] device bridge_slave_1 left promiscuous mode [ 1261.113429][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.162769][ T9962] device bridge_slave_0 left promiscuous mode [ 1261.197057][ T9962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.227753][T16129] loop3: detected capacity change from 0 to 164 [ 1261.287284][ T9962] device veth1_macvtap left promiscuous mode [ 1261.433545][ T9962] device veth0_macvtap left promiscuous mode [ 1261.446041][T16130] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1261.452578][T16130] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1261.460757][T16130] vhci_hcd vhci_hcd.0: Device attached [ 1261.484370][T16130] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1261.622584][ T9962] device veth1_vlan left promiscuous mode [ 1261.748939][ T21] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 1261.763096][ T9962] device veth0_vlan left promiscuous mode [ 1262.227433][T16131] vhci_hcd: connection reset by peer [ 1262.233523][ T4313] vhci_hcd: stop threads [ 1262.243699][ T4313] vhci_hcd: release socket [ 1262.291041][ T4313] vhci_hcd: disconnect device [ 1262.299172][ T4249] Bluetooth: hci1: command 0x040f tx timeout [ 1262.941932][T16112] loop2: detected capacity change from 0 to 32768 [ 1263.017241][T16119] loop4: detected capacity change from 0 to 32768 [ 1263.215035][ T9962] team0 (unregistering): Port device team_slave_1 removed [ 1263.390172][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1264.378884][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 1264.533313][ T9962] team0 (unregistering): Port device team_slave_0 removed [ 1264.547644][ T9962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.563138][ T9962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.869952][ T9962] bond0 (unregistering): Released all slaves [ 1266.184819][T16162] fuse: Unknown parameter 'group_i00000000000000000000' [ 1266.939262][ T21] vhci_hcd: vhci_device speed not set [ 1267.428410][T16061] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1267.501468][T16061] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1267.535962][T16061] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1267.599434][T16061] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1267.843813][T16181] loop4: detected capacity change from 0 to 164 [ 1267.902275][T16061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.016592][T16182] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1268.023136][T16182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1268.047928][T16182] vhci_hcd vhci_hcd.0: Device attached [ 1268.111345][T16182] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1268.319057][ T5206] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 1268.477308][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1268.549548][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1268.697552][T16061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.847929][T16183] vhci_hcd: connection reset by peer [ 1268.856864][ T4254] vhci_hcd: stop threads [ 1268.863092][ T4254] vhci_hcd: release socket [ 1268.904425][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1268.925213][ T4254] vhci_hcd: disconnect device [ 1268.971984][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1269.113236][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.120629][ T6304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.407613][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1269.433328][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1269.504657][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1269.559472][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.566665][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.989870][T16193] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1270.015243][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1270.989791][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1271.306694][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1271.452281][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1271.616264][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1271.744834][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1271.786961][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1271.823534][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1272.912451][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1273.078690][T16061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1273.177090][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1273.194500][T16226] fuse: Unknown parameter 'group_i00000000000000000000' [ 1273.254844][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1273.331100][T16228] loop2: detected capacity change from 0 to 2048 [ 1273.395718][T16238] loop5: detected capacity change from 0 to 164 [ 1273.439904][T16228] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1273.489033][T16228] NILFS (loop2): mounting unchecked fs [ 1273.586978][T16243] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1273.680756][ T5206] vhci_hcd: vhci_device speed not set [ 1273.686335][ T4191] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1274.846032][T16241] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1274.852706][T16241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1274.860922][T16241] vhci_hcd vhci_hcd.0: Device attached [ 1274.869058][T16242] vhci_hcd: connection closed [ 1274.882766][ T4226] vhci_hcd: stop threads [ 1274.918075][ T4226] vhci_hcd: release socket [ 1274.929251][T16228] NILFS (loop2): recovery complete [ 1274.950175][ T4226] vhci_hcd: disconnect device [ 1274.984164][T16246] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1274.995043][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1274.995175][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.056298][T16061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.209477][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.231174][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.394690][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1275.409077][ T4191] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1275.441037][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1275.498934][T16061] device veth0_vlan entered promiscuous mode [ 1275.507244][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1275.539675][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1275.569638][T16061] device veth1_vlan entered promiscuous mode [ 1275.615051][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1275.629794][ T4191] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1275.643579][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1275.648844][ T4191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.683976][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1275.693221][ T4191] usb 4-1: Product: syz [ 1275.697512][ T4191] usb 4-1: Manufacturer: syz [ 1275.714539][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1275.722625][ T4191] usb 4-1: SerialNumber: syz [ 1275.761428][T16061] device veth0_macvtap entered promiscuous mode [ 1275.797058][T16061] device veth1_macvtap entered promiscuous mode [ 1275.885385][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.948903][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.010964][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.056632][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.121406][T16061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.160340][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1276.179887][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1276.214671][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1276.249696][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1276.262568][T16249] loop5: detected capacity change from 0 to 32768 [ 1276.276459][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.328531][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.448285][T16249] XFS (loop5): Mounting V5 Filesystem [ 1276.470841][ T4191] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1276.488899][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.555002][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.648026][T16061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.702585][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1276.747821][T16249] XFS (loop5): Ending clean mount [ 1276.755308][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1276.804170][T16061] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.818830][T16061] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.886456][T16061] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.905325][ T26] audit: type=1800 audit(1747624868.566:43): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3017" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 1276.919998][T16061] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.403845][ T9735] XFS (loop5): Unmounting Filesystem [ 1278.411135][ T4273] usb 4-1: USB disconnect, device number 73 [ 1278.502619][ T4273] usblp0: removed [ 1278.800781][T16273] loop4: detected capacity change from 0 to 2048 [ 1279.640240][T16273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1279.702519][ T6304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.888727][ T6304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.131308][T16281] loop2: detected capacity change from 0 to 2048 [ 1280.198269][T16283] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 1280.325752][T16281] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1280.376768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1280.473135][T16281] NILFS (loop2): mounting unchecked fs [ 1280.499588][T16281] NILFS (loop2): recovery complete [ 1280.520491][T16284] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1280.533562][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.580953][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.593122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1280.712355][T16286] fuse: Unknown parameter 'group_i00000000000000000000' [ 1281.115822][T16292] loop1: detected capacity change from 0 to 2048 [ 1281.268594][T16295] loop4: detected capacity change from 0 to 2048 [ 1281.334445][T16295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1281.344659][T16292] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1281.395569][T16292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1281.657237][T16292] UDF-fs: unknown compression code (0) [ 1281.777621][T16292] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1282.041030][T16301] UDF-fs: unknown compression code (0) [ 1283.394817][T16299] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 1284.144168][T16307] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1284.665680][T16312] loop4: detected capacity change from 0 to 32768 [ 1284.949240][T14787] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1285.614292][T16312] XFS (loop4): Mounting V5 Filesystem [ 1285.776695][T16312] XFS (loop4): Ending clean mount [ 1285.934875][T16333] loop5: detected capacity change from 0 to 2048 [ 1285.959496][T14787] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1286.158963][T14787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1286.289110][ T26] audit: type=1800 audit(1747624877.946:44): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3030" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 1286.325403][T14787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.333805][T14787] usb 3-1: Product: syz [ 1286.338061][T14787] usb 3-1: Manufacturer: syz [ 1286.343269][T14787] usb 3-1: SerialNumber: syz [ 1286.361812][T16333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1286.649263][ T23] Bluetooth: hci6: command 0x0406 tx timeout [ 1287.916968][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 1288.655297][T16350] fuse: Unknown parameter 'group_id00000000000000000000' [ 1288.786404][T16334] chnl_net:caif_netlink_parms(): no params data found [ 1288.832805][T16353] loop2: detected capacity change from 0 to 2048 [ 1288.860707][T14787] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1288.886934][T14787] usb 3-1: USB disconnect, device number 75 [ 1288.892849][T16356] loop5: detected capacity change from 0 to 2048 [ 1288.912565][T14787] usblp0: removed [ 1288.920707][T16353] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1288.926923][T16356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1288.949386][T15164] XFS (loop4): Unmounting Filesystem [ 1288.970362][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.985897][T16353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1289.882735][T16353] UDF-fs: unknown compression code (0) [ 1289.900941][T16353] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1289.923345][T16353] UDF-fs: unknown compression code (0) [ 1290.043953][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.279132][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 1290.343848][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.965881][T16373] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3043'. [ 1291.167592][T16334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.193067][T16334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.210862][T16334] device bridge_slave_0 entered promiscuous mode [ 1291.223645][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.269783][T16334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.276870][T16334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.324835][T16334] device bridge_slave_1 entered promiscuous mode [ 1291.769667][T16334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.001551][T16334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.299294][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 1292.328181][T16384] loop4: detected capacity change from 0 to 2048 [ 1292.376934][T16384] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1292.386676][T16384] NILFS (loop4): mounting unchecked fs [ 1292.419673][T16384] NILFS (loop4): recovery complete [ 1292.435644][T16387] fuse: Unknown parameter 'group_id00000000000000000000' [ 1292.449293][T16385] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1292.546962][ T9] tipc: Left network mode [ 1292.762165][T16334] team0: Port device team_slave_0 added [ 1292.826340][T16334] team0: Port device team_slave_1 added [ 1292.955599][T16334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.981195][T16371] loop5: detected capacity change from 0 to 32768 [ 1293.013167][T16334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.113056][T16371] XFS (loop5): Mounting V5 Filesystem [ 1293.214149][T16334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.225508][T16371] XFS (loop5): log mount failed [ 1293.459979][T16334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.477216][T16334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.553421][T16334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.695098][ T23] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1293.706797][T16334] device hsr_slave_0 entered promiscuous mode [ 1293.744527][T16334] device hsr_slave_1 entered promiscuous mode [ 1293.764603][T16334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.795626][T16334] Cannot create hsr debugfs directory [ 1293.985725][T16421] loop5: detected capacity change from 0 to 64 [ 1294.038454][T16421] Trying to free block not in datazone [ 1294.062323][T16421] Trying to free block not in datazone [ 1294.078026][T16421] Trying to free block not in datazone [ 1294.089101][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1294.099931][T16421] Trying to free block not in datazone [ 1294.104914][T16412] loop2: detected capacity change from 0 to 32768 [ 1294.105390][T16421] minix_free_block (loop5:6): bit already cleared [ 1294.158673][T16421] Trying to free block not in datazone [ 1294.173704][T16421] Trying to free block not in datazone [ 1294.209409][T16412] XFS (loop2): Mounting V5 Filesystem [ 1294.269004][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1294.282199][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.301387][ T23] usb 2-1: Product: syz [ 1294.306894][ T23] usb 2-1: Manufacturer: syz [ 1294.318830][ T23] usb 2-1: SerialNumber: syz [ 1294.374298][T16412] XFS (loop2): Ending clean mount [ 1294.379756][ T4246] Bluetooth: hci0: command 0x0419 tx timeout [ 1294.401265][ T26] audit: type=1800 audit(1747624886.066:45): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3050" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 1294.721767][ T4180] XFS (loop2): Unmounting Filesystem [ 1295.045089][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1295.764840][T16334] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1295.804646][T16334] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1295.915812][T16334] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1295.925966][T16454] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3055'. [ 1295.973095][ T9] device hsr_slave_0 left promiscuous mode [ 1296.000288][ T9] device hsr_slave_1 left promiscuous mode [ 1296.013184][ T9] device bridge_slave_1 left promiscuous mode [ 1296.052213][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.080500][ T9] device bridge_slave_0 left promiscuous mode [ 1296.124603][T16456] loop4: detected capacity change from 0 to 4096 [ 1296.136818][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.211619][T16457] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1296.222641][ T9] device veth1_macvtap left promiscuous mode [ 1296.254586][ T9] device veth0_macvtap left promiscuous mode [ 1296.283113][ T9] device veth1_vlan left promiscuous mode [ 1296.438429][ T9] device veth0_vlan left promiscuous mode [ 1297.288126][ T4273] usb 2-1: USB disconnect, device number 91 [ 1298.016708][ T4273] usblp0: removed [ 1298.073796][T16467] loop2: detected capacity change from 0 to 2048 [ 1298.136375][T16467] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1298.141050][T16465] fuse: Unknown parameter 'group_id00000000000000000000' [ 1298.163607][T16467] NILFS (loop2): mounting unchecked fs [ 1298.186860][T16467] NILFS (loop2): recovery complete [ 1298.227250][T16473] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1298.467639][T16477] loop4: detected capacity change from 0 to 64 [ 1298.621007][T16477] Trying to free block not in datazone [ 1298.626511][T16477] Trying to free block not in datazone [ 1298.663092][T16477] Trying to free block not in datazone [ 1298.668560][T16477] Trying to free block not in datazone [ 1298.724587][T16477] minix_free_block (loop4:6): bit already cleared [ 1298.756593][T16477] Trying to free block not in datazone [ 1298.849295][T16477] Trying to free block not in datazone [ 1299.008176][T16471] loop5: detected capacity change from 0 to 32768 [ 1299.451266][T16471] XFS (loop5): Mounting V5 Filesystem [ 1299.468253][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1299.489437][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1299.533490][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.695636][T16471] XFS (loop5): Ending clean mount [ 1299.704829][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.737739][ T26] audit: type=1800 audit(1747624891.396:46): pid=16471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3060" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 1299.823006][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.830036][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.051242][ T9] bond0 (unregistering): Released all slaves [ 1300.092446][ T9735] XFS (loop5): Unmounting Filesystem [ 1300.302316][T16334] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1300.704108][T16334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.766467][T16497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1300.772989][T16497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1300.783703][T16497] vhci_hcd vhci_hcd.0: Device attached [ 1300.825265][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1300.845520][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1300.877749][T16334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.079156][ T5206] usb 35-1: new low-speed USB device number 10 using vhci_hcd [ 1301.125908][T16508] loop4: detected capacity change from 0 to 2048 [ 1301.135916][T16500] vhci_hcd: connection reset by peer [ 1301.226901][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1301.277599][ T4250] vhci_hcd: stop threads [ 1301.281987][ T4250] vhci_hcd: release socket [ 1301.286513][ T4250] vhci_hcd: disconnect device [ 1301.331113][T16509] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1301.374594][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1301.419633][T16508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1301.452086][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.459200][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.514078][T16515] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 1302.804148][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1302.812968][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1302.821529][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.828590][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.836683][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1302.846603][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.876106][T16334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1302.953325][T16334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1302.986656][T16519] loop1: detected capacity change from 0 to 2048 [ 1303.025970][T16519] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1303.054207][T16519] NILFS (loop1): mounting unchecked fs [ 1303.061819][ T5319] udevd[5319]: incorrect nilfs2 checksum on /dev/loop1 [ 1303.103726][T16519] NILFS (loop1): recovery complete [ 1303.120345][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1303.123733][T16525] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1303.277515][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1303.292237][T16503] loop2: detected capacity change from 0 to 32768 [ 1303.304393][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1303.477629][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1303.759833][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1303.778546][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1303.797731][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1303.869455][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1303.924580][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1303.947484][T16533] fuse: Bad value for 'user_id' [ 1303.980238][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1304.178166][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1305.951981][T16567] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3075'. [ 1306.056685][T10225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1306.128984][T10225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1306.201902][T16334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.220900][ T5206] vhci_hcd: vhci_device speed not set [ 1306.258906][ T4246] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1306.263273][T16572] loop1: detected capacity change from 0 to 2048 [ 1306.321416][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1306.367151][T16572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1306.369103][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1306.649301][ T4246] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1307.329365][ T4246] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1308.247077][ T4246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.377317][ T4246] usb 6-1: Product: syz [ 1308.407961][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1308.459615][ T4246] usb 6-1: Manufacturer: syz [ 1308.536370][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1308.557693][ T4246] usb 6-1: SerialNumber: syz [ 1308.707419][T16334] device veth0_vlan entered promiscuous mode [ 1308.792026][T16579] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 1308.876067][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1308.979349][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1308.988651][T16581] loop4: detected capacity change from 0 to 2048 [ 1309.057676][T16581] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1309.119923][T16581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1309.166163][T16334] device veth1_vlan entered promiscuous mode [ 1309.174331][ T4246] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1309.195610][T16581] UDF-fs: unknown compression code (0) [ 1309.242040][ T4246] usb 6-1: USB disconnect, device number 40 [ 1309.243251][T16581] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1309.289838][ T4246] usblp0: removed [ 1309.312162][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1309.352537][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1309.373737][T16585] UDF-fs: unknown compression code (0) [ 1309.381439][T16584] loop5: detected capacity change from 0 to 2048 [ 1309.411012][T16334] device veth0_macvtap entered promiscuous mode [ 1309.417953][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1309.446881][T16589] fuse: Bad value for 'user_id' [ 1309.485010][T16334] device veth1_macvtap entered promiscuous mode [ 1309.493687][T16584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1309.627998][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.665097][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.717174][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.762751][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.770627][T16597] loop2: detected capacity change from 0 to 2048 [ 1309.777536][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.789402][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.801932][T16334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.811920][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.822825][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.833059][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.883877][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.958983][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.972446][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.983812][T16334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.993305][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1310.022663][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1310.092280][T16597] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1310.123741][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1310.143030][T16597] NILFS (loop2): mounting unchecked fs [ 1310.149252][ T5319] udevd[5319]: incorrect nilfs2 checksum on /dev/loop2 [ 1310.169727][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1310.198493][T16597] NILFS (loop2): recovery complete [ 1310.219449][T16334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.266783][T16607] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1310.269270][T16334] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.453086][T16334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.489701][T16334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.623985][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.658997][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.726769][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1310.749123][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.806316][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.865114][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1311.194125][T16593] loop1: detected capacity change from 0 to 32768 [ 1311.352917][T16593] XFS (loop1): Mounting V5 Filesystem [ 1311.442523][T16606] loop4: detected capacity change from 0 to 32768 [ 1312.239967][T16606] XFS (loop4): Mounting V5 Filesystem [ 1312.299716][T16593] XFS (loop1): Ending clean mount [ 1312.345235][ T26] audit: type=1800 audit(1747624904.006:47): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3080" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 1312.494348][T16606] XFS (loop4): Ending clean mount [ 1312.598912][ T26] audit: type=1800 audit(1747624904.256:48): pid=16606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3083" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 1313.062718][T16061] XFS (loop1): Unmounting Filesystem [ 1313.481173][T15164] XFS (loop4): Unmounting Filesystem [ 1313.546473][T16668] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1313.569760][T16660] chnl_net:caif_netlink_parms(): no params data found [ 1314.808159][T16680] fuse: Bad value for 'user_id' [ 1314.910527][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.917613][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.970761][T16660] device bridge_slave_0 entered promiscuous mode [ 1315.025986][ T4249] Bluetooth: hci3: command 0x0409 tx timeout [ 1315.217176][T16682] loop1: detected capacity change from 0 to 2048 [ 1315.225530][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.687802][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.712953][T16660] device bridge_slave_1 entered promiscuous mode [ 1315.914368][T16671] loop3: detected capacity change from 0 to 32768 [ 1315.937309][T16682] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1316.015030][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.062420][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.344659][T16682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.387281][T16693] loop4: detected capacity change from 0 to 2048 [ 1316.411365][T16671] XFS (loop3): Mounting V5 Filesystem [ 1316.468416][T16682] UDF-fs: unknown compression code (0) [ 1316.503754][T16682] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1316.520499][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.525130][T16685] UDF-fs: unknown compression code (0) [ 1316.539405][T16693] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1316.571271][T16693] NILFS (loop4): mounting unchecked fs [ 1316.622994][T16660] team0: Port device team_slave_0 added [ 1316.653364][ T4161] udevd[4161]: incorrect nilfs2 checksum on /dev/loop4 [ 1316.685084][T16671] XFS (loop3): Ending clean mount [ 1316.699825][ T26] audit: type=1800 audit(1747624908.366:49): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3090" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 1316.728710][T16693] NILFS (loop4): recovery complete [ 1316.738433][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.753249][T16706] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1317.099320][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 1317.130461][T16660] team0: Port device team_slave_1 added [ 1317.148331][T16705] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1317.154854][T16705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1317.177310][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.200187][T16705] vhci_hcd vhci_hcd.0: Device attached [ 1317.296215][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.332622][T16334] XFS (loop3): Unmounting Filesystem [ 1317.388726][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.404917][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.475424][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.504045][T16713] loop1: detected capacity change from 0 to 32768 [ 1317.510830][ T5206] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1317.514152][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.526932][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.562976][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.581671][T16711] vhci_hcd: connection reset by peer [ 1317.587139][ T4279] vhci_hcd: stop threads [ 1317.596063][ T4279] vhci_hcd: release socket [ 1317.610559][ T4279] vhci_hcd: disconnect device [ 1317.634700][T16713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3096 (16713) [ 1317.723755][T16660] device hsr_slave_0 entered promiscuous mode [ 1317.764592][T16660] device hsr_slave_1 entered promiscuous mode [ 1317.764682][T16713] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1317.791554][T16717] loop4: detected capacity change from 0 to 2048 [ 1317.814397][T16713] BTRFS info (device loop1): max_inline at 0 [ 1317.844630][T16717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1317.879374][T16713] BTRFS info (device loop1): allowing degraded mounts [ 1317.900055][T16713] BTRFS info (device loop1): force zlib compression, level 3 [ 1317.973157][T16713] BTRFS info (device loop1): force clearing of disk cache [ 1318.007107][T16719] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 1318.086757][T16713] BTRFS info (device loop1): allowing degraded mounts [ 1318.707796][T16713] BTRFS info (device loop1): max_inline at 0 [ 1318.727966][T16713] BTRFS info (device loop1): using free space tree [ 1318.739122][T16713] BTRFS info (device loop1): has skinny extents [ 1318.882198][ T9] tipc: Disabling bearer [ 1318.887786][ T9] tipc: Left network mode [ 1319.179526][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 1319.717704][T16713] BTRFS info (device loop1): enabling ssd optimizations [ 1319.763223][T16713] BTRFS info (device loop1): clearing free space tree [ 1319.790686][T16753] fuse: Bad value for 'fd' [ 1319.813206][T16713] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1319.869105][T16713] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1319.979956][T16713] BTRFS info (device loop1): creating free space tree [ 1319.987722][T16713] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1320.084983][T16763] loop3: detected capacity change from 0 to 16 [ 1320.140118][T16713] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1320.241376][T16763] erofs: Unknown parameter '0xffffffffffffffff' [ 1320.776909][T16660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1321.006756][T16769] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1321.234090][T16660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1321.240295][T16726] loop5: detected capacity change from 0 to 32768 [ 1321.307636][T14780] Bluetooth: hci3: command 0x0419 tx timeout [ 1321.307793][T16660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1321.374746][T16726] XFS (loop5): Mounting V5 Filesystem [ 1321.424383][T16660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1321.489713][T16754] loop4: detected capacity change from 0 to 32768 [ 1321.612795][T16726] XFS (loop5): Ending clean mount [ 1321.673966][T16787] loop1: detected capacity change from 0 to 1024 [ 1321.705648][ T26] audit: type=1800 audit(1747624913.366:50): pid=16726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3099" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 1321.789298][T16787] EXT4-fs (loop1): Ignoring removed nobh option [ 1321.809935][T16754] XFS (loop4): Mounting V5 Filesystem [ 1321.823862][T16787] EXT4-fs (loop1): Ignoring removed bh option [ 1321.846868][T16787] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1322.095029][T16787] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1322.145197][T16754] XFS (loop4): Ending clean mount [ 1322.240948][ T26] audit: type=1800 audit(1747624913.906:51): pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3100" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 1322.253377][T16660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.789578][ T5206] vhci_hcd: vhci_device speed not set [ 1322.806570][T16660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.978712][ T9735] XFS (loop5): Unmounting Filesystem [ 1323.056486][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1323.091127][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1323.138582][T15164] XFS (loop4): Unmounting Filesystem [ 1323.395352][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1323.404494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1323.428622][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.435762][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.458588][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1323.980031][ T9] device hsr_slave_0 left promiscuous mode [ 1324.159858][T16816] loop3: detected capacity change from 0 to 32768 [ 1324.175109][ T9] device hsr_slave_1 left promiscuous mode [ 1324.183800][ T9] device bridge_slave_1 left promiscuous mode [ 1324.198581][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.253769][ T9] device bridge_slave_0 left promiscuous mode [ 1324.343810][T16834] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1324.369897][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.399073][T16816] XFS (loop3): Mounting V5 Filesystem [ 1324.449206][ T9] device veth1_macvtap left promiscuous mode [ 1324.468732][ T9] device veth0_macvtap left promiscuous mode [ 1324.475174][ T9] device veth1_vlan left promiscuous mode [ 1324.481204][ T9] device veth0_vlan left promiscuous mode [ 1324.553720][T16816] XFS (loop3): Ending clean mount [ 1324.647593][ T26] audit: type=1800 audit(1747624916.306:52): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3107" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 1324.695808][T16842] fuse: Bad value for 'fd' [ 1325.037240][T16334] XFS (loop3): Unmounting Filesystem [ 1326.213140][T16849] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1326.219672][T16849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1326.281896][T16849] vhci_hcd vhci_hcd.0: Device attached [ 1326.427085][T16852] vhci_hcd: connection closed [ 1326.427400][ T145] vhci_hcd: stop threads [ 1326.468164][ T145] vhci_hcd: release socket [ 1326.481192][ T145] vhci_hcd: disconnect device [ 1326.489242][ T5206] vhci_hcd: vhci_device speed not set [ 1326.503521][T16857] loop1: detected capacity change from 0 to 164 [ 1326.526324][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1326.553408][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1326.598619][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.677291][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.703409][T16859] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1326.729154][T14782] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1327.100921][T14782] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1327.548633][T16861] loop4: detected capacity change from 0 to 64 [ 1327.588753][T16861] Trying to free block not in datazone [ 1327.594402][T16861] Trying to free block not in datazone [ 1327.600489][T16861] Trying to free block not in datazone [ 1327.605959][T16861] Trying to free block not in datazone [ 1327.614807][T16861] minix_free_block (loop4:6): bit already cleared [ 1327.617790][ T9] bond0 (unregistering): Released all slaves [ 1327.621896][T16861] Trying to free block not in datazone [ 1327.633092][T16861] Trying to free block not in datazone [ 1327.659163][T14782] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1327.668207][T14782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.690401][T14782] usb 4-1: Product: syz [ 1327.714979][T14782] usb 4-1: Manufacturer: syz [ 1327.724180][T14782] usb 4-1: SerialNumber: syz [ 1327.734959][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1327.758514][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1327.770401][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.777473][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.810375][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1327.853668][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1327.871504][T16865] loop4: detected capacity change from 0 to 64 [ 1327.872674][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1327.904897][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1328.024860][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1328.056638][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1328.090391][T16865] Trying to free block not in datazone [ 1328.103629][T16872] fuse: Bad value for 'fd' [ 1328.109833][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1328.128343][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1328.141273][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1328.150919][T16865] Trying to free block not in datazone [ 1328.156885][T16865] Trying to free block not in datazone [ 1328.157220][T16660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1328.180433][T16865] Trying to free block not in datazone [ 1328.193116][T16865] minix_free_block (loop4:6): bit already cleared [ 1328.241091][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1328.270585][T16865] Trying to free block not in datazone [ 1328.355417][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1328.407556][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1328.514859][T14782] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1329.001495][T16865] Trying to free block not in datazone [ 1329.114377][T16882] loop1: detected capacity change from 0 to 64 [ 1329.160171][T16882] Trying to free block not in datazone [ 1329.789044][T16882] Trying to free block not in datazone [ 1329.809049][T16882] Trying to free block not in datazone [ 1329.814591][T16882] Trying to free block not in datazone [ 1329.820423][T16882] minix_free_block (loop1:6): bit already cleared [ 1329.827958][T16882] Trying to free block not in datazone [ 1329.833480][T16882] Trying to free block not in datazone [ 1329.899232][ T5216] usb 4-1: USB disconnect, device number 74 [ 1329.925548][ T5216] usblp0: removed [ 1330.185076][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1330.202007][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1330.257044][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.329890][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1330.399288][T14782] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1330.430684][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1330.682521][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1330.741165][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1330.779591][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1330.809444][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1330.814908][T14782] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1330.839324][T16660] device veth0_vlan entered promiscuous mode [ 1330.878641][T16660] device veth1_vlan entered promiscuous mode [ 1331.007146][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1331.020463][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1331.032528][T14782] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1331.051965][T14782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.062579][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1331.078837][T14782] usb 5-1: Product: syz [ 1331.089686][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1331.097846][T14782] usb 5-1: Manufacturer: syz [ 1331.102647][T14782] usb 5-1: SerialNumber: syz [ 1331.120331][T16660] device veth0_macvtap entered promiscuous mode [ 1331.141384][T16660] device veth1_macvtap entered promiscuous mode [ 1331.209597][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1331.229307][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1331.271946][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.304507][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.328443][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.349171][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.398883][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.408581][T16902] loop5: detected capacity change from 0 to 32768 [ 1331.428306][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.469780][T16902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3127 (16902) [ 1331.470206][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.548647][T16902] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1331.548895][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.602372][T16902] BTRFS info (device loop5): max_inline at 0 [ 1331.611078][T16660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.624902][T16902] BTRFS info (device loop5): allowing degraded mounts [ 1331.640695][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1331.656039][T16902] BTRFS info (device loop5): force zlib compression, level 3 [ 1331.660044][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1331.694191][T16902] BTRFS info (device loop5): force clearing of disk cache [ 1331.716473][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.718940][T16902] BTRFS info (device loop5): allowing degraded mounts [ 1331.746445][T16897] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1331.754513][T16897] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1331.754713][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.795178][T16902] BTRFS info (device loop5): max_inline at 0 [ 1331.828306][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.833959][T16902] BTRFS info (device loop5): using free space tree [ 1331.853559][T14782] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1331.864650][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.864689][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.864720][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.864742][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.884799][T16902] BTRFS info (device loop5): has skinny extents [ 1331.938328][T16908] loop3: detected capacity change from 0 to 64 [ 1331.959535][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.977865][T16660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.993102][T16660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.002257][T16660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.010995][T16660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.020762][T16660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.033119][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1332.051653][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1332.123308][T16907] Trying to free block not in datazone [ 1332.194033][T16907] Trying to free block not in datazone [ 1332.267814][T16907] Trying to free block not in datazone [ 1332.274107][T16902] BTRFS info (device loop5): enabling ssd optimizations [ 1332.310425][T16902] BTRFS info (device loop5): clearing free space tree [ 1332.369370][T16907] Trying to free block not in datazone [ 1332.374856][T16907] minix_free_block (loop3:6): bit already cleared [ 1332.388308][ T5024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.413056][ T5024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.451727][T16907] Trying to free block not in datazone [ 1332.487921][T16907] Trying to free block not in datazone [ 1332.493373][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1332.608242][T10269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.646311][T10269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.708545][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1332.738486][T16902] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1332.769930][T16932] fuse: Bad value for 'group_id' [ 1332.771879][T16902] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1332.849755][T16902] BTRFS info (device loop5): creating free space tree [ 1332.857428][T16902] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1332.895903][T16934] loop3: detected capacity change from 0 to 2048 [ 1332.919937][T16902] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1333.011741][T16934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1333.820276][T16944] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 1334.216638][ T4249] usb 5-1: USB disconnect, device number 70 [ 1334.258680][ T4249] usblp0: removed [ 1336.252226][T16952] loop2: detected capacity change from 0 to 32768 [ 1336.300531][T16952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3136 (16952) [ 1336.380786][T16952] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1336.399038][T16952] BTRFS info (device loop2): max_inline at 0 [ 1336.428845][T16952] BTRFS info (device loop2): allowing degraded mounts [ 1336.435631][T16952] BTRFS info (device loop2): force zlib compression, level 3 [ 1336.443208][T16952] BTRFS info (device loop2): force clearing of disk cache [ 1336.463395][T16952] BTRFS info (device loop2): allowing degraded mounts [ 1336.479101][T16952] BTRFS info (device loop2): max_inline at 0 [ 1336.488909][T16952] BTRFS info (device loop2): using free space tree [ 1336.505597][T16952] BTRFS info (device loop2): has skinny extents [ 1336.769128][T16952] BTRFS info (device loop2): enabling ssd optimizations [ 1336.816951][T16952] BTRFS info (device loop2): clearing free space tree [ 1336.901200][T16952] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1337.013448][T16952] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1337.084087][T16952] BTRFS info (device loop2): creating free space tree [ 1337.099687][T16952] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1337.475935][T16956] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1337.749980][T16956] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1337.845821][T16952] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1338.070539][T16995] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1338.123828][T16997] loop3: detected capacity change from 0 to 64 [ 1338.197216][T16997] Trying to free block not in datazone [ 1338.221886][T16997] Trying to free block not in datazone [ 1338.249458][T16997] Trying to free block not in datazone [ 1338.259092][T16997] Trying to free block not in datazone [ 1338.308008][T16997] minix_free_block (loop3:6): bit already cleared [ 1338.395936][T16997] Trying to free block not in datazone [ 1338.430764][T17003] loop5: detected capacity change from 0 to 2048 [ 1338.526317][T16997] Trying to free block not in datazone [ 1338.608233][T17003] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1338.840101][T17007] fuse: Bad value for 'group_id' [ 1338.931235][T17003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1339.223309][T17010] loop2: detected capacity change from 0 to 512 [ 1339.256972][T17003] UDF-fs: unknown compression code (0) [ 1339.262636][T17003] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1339.278556][T17003] UDF-fs: unknown compression code (0) [ 1339.445018][T17010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1339.655047][T17010] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.3145: bad orphan inode 17 [ 1339.665778][T17010] EXT4-fs (loop2): Remounting filesystem read-only [ 1339.673184][T17010] ext4_test_bit(bit=16, block=4) = 1 [ 1339.678537][T17010] is_bad_inode(inode)=0 [ 1339.682732][T17010] NEXT_ORPHAN(inode)=2147418128 [ 1339.687601][T17010] max_ino=32 [ 1339.690839][T17010] i_nlink=0 [ 1339.694070][T17010] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 1340.000397][T17019] loop5: detected capacity change from 0 to 2048 [ 1343.073345][T17019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1343.106854][T17033] loop1: detected capacity change from 0 to 64 [ 1343.178477][T17027] loop3: detected capacity change from 0 to 4096 [ 1343.430361][T17033] Trying to free block not in datazone [ 1343.435860][T17033] Trying to free block not in datazone [ 1343.458373][T17033] Trying to free block not in datazone [ 1343.473054][T17040] fuse: Bad value for 'fd' [ 1343.476709][T17041] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1343.481360][T17033] Trying to free block not in datazone [ 1343.505058][T17038] loop2: detected capacity change from 0 to 512 [ 1343.554438][T17038] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1343.588154][T17033] minix_free_block (loop1:6): bit already cleared [ 1343.643094][T17033] Trying to free block not in datazone [ 1343.649435][T17033] Trying to free block not in datazone [ 1343.661691][T17038] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.3154: bad orphan inode 17 [ 1343.699116][T17038] EXT4-fs (loop2): Remounting filesystem read-only [ 1343.705706][T17038] ext4_test_bit(bit=16, block=4) = 1 [ 1343.711358][T17038] is_bad_inode(inode)=0 [ 1343.715525][T17038] NEXT_ORPHAN(inode)=2147418128 [ 1343.720872][T17038] max_ino=32 [ 1343.724082][T17038] i_nlink=0 [ 1343.727327][T17038] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 1343.730935][T17050] fuse: Bad value for 'group_id' [ 1343.926253][T17031] loop4: detected capacity change from 0 to 32768 [ 1344.622549][T17055] loop3: detected capacity change from 0 to 2048 [ 1344.943849][T17055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1345.233322][T17062] loop4: detected capacity change from 0 to 2048 [ 1345.258288][T17062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1347.553365][T17073] loop5: detected capacity change from 0 to 2048 [ 1347.611976][T17077] loop3: detected capacity change from 0 to 2048 [ 1347.669420][T17073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1347.708161][T17077] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1347.785200][T17077] NILFS (loop3): mounting unchecked fs [ 1347.975440][ T4659] udevd[4659]: incorrect nilfs2 checksum on /dev/loop3 [ 1349.390567][T17077] NILFS (loop3): recovery complete [ 1349.397903][T17084] fuse: Invalid rootmode [ 1349.455620][T17089] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1349.590746][T17088] loop5: detected capacity change from 0 to 2048 [ 1349.651406][T17088] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1349.932714][T17088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1350.306939][T17088] UDF-fs: unknown compression code (0) [ 1350.406621][T17088] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1350.453868][T17098] loop1: detected capacity change from 0 to 2048 [ 1350.535190][T17090] UDF-fs: unknown compression code (0) [ 1350.552940][T17098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1350.570872][T17102] loop2: detected capacity change from 0 to 64 [ 1350.629319][T17102] Trying to free block not in datazone [ 1350.639253][T17102] Trying to free block not in datazone [ 1350.644727][T17102] Trying to free block not in datazone [ 1350.673889][T17102] Trying to free block not in datazone [ 1350.689322][T17102] minix_free_block (loop2:6): bit already cleared [ 1350.741266][T17102] Trying to free block not in datazone [ 1350.985002][T17102] Trying to free block not in datazone [ 1351.292808][T17100] loop4: detected capacity change from 0 to 32768 [ 1351.404056][T17100] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3172 (17100) [ 1351.817440][T17100] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1351.890151][T17100] BTRFS info (device loop4): max_inline at 0 [ 1351.986307][T17100] BTRFS info (device loop4): allowing degraded mounts [ 1352.342375][T17100] BTRFS info (device loop4): force zlib compression, level 3 [ 1352.647203][T17100] BTRFS info (device loop4): force clearing of disk cache [ 1352.671954][T17110] loop1: detected capacity change from 0 to 2048 [ 1352.695208][T17100] BTRFS info (device loop4): allowing degraded mounts [ 1352.729034][T17100] BTRFS info (device loop4): max_inline at 0 [ 1352.761647][T17100] BTRFS info (device loop4): using free space tree [ 1352.791155][T17110] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1352.853648][T17100] BTRFS info (device loop4): has skinny extents [ 1352.943870][T17107] loop5: detected capacity change from 0 to 4096 [ 1353.086636][T17107] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1354.701892][T17139] loop2: detected capacity change from 0 to 64 [ 1354.810691][T17139] Trying to free block not in datazone [ 1355.028271][T17139] Trying to free block not in datazone [ 1355.034159][T17139] Trying to free block not in datazone [ 1355.039775][T17139] Trying to free block not in datazone [ 1355.045572][T17139] minix_free_block (loop2:6): bit already cleared [ 1355.052179][T17139] Trying to free block not in datazone [ 1355.057730][T17139] Trying to free block not in datazone [ 1356.426622][T17100] BTRFS error (device loop4): open_ctree failed: -12 [ 1357.227665][T17148] fuse: Invalid rootmode [ 1357.319323][ T4659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4659) [ 1357.607309][T17160] loop3: detected capacity change from 0 to 2048 [ 1358.313093][T17167] fuse: Bad value for 'fd' [ 1358.407558][T17160] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1358.471511][T17160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1358.613808][T17156] UDF-fs: unknown compression code (0) [ 1358.644977][T17156] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1358.744716][T17156] UDF-fs: unknown compression code (0) [ 1359.632540][T17183] loop2: detected capacity change from 0 to 64 [ 1359.927338][T17183] Trying to free block not in datazone [ 1359.938453][T17183] Trying to free block not in datazone [ 1359.950733][T17183] Trying to free block not in datazone [ 1359.956212][T17183] Trying to free block not in datazone [ 1359.962537][T17183] minix_free_block (loop2:6): bit already cleared [ 1359.972529][T17183] Trying to free block not in datazone [ 1359.981042][T17183] Trying to free block not in datazone [ 1360.052322][T17195] loop1: detected capacity change from 0 to 16 [ 1360.299970][T17195] erofs: Unknown parameter '0xffffffffffffffff' [ 1360.878563][T17198] loop4: detected capacity change from 0 to 2048 [ 1361.120755][T17198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1361.262491][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.269457][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.613417][T17203] fuse: Invalid rootmode [ 1363.260350][T17200] loop1: detected capacity change from 0 to 2048 [ 1363.468964][T17200] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1363.550743][T17200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.606597][T17200] UDF-fs: unknown compression code (0) [ 1363.638839][T17200] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1363.830106][T17201] UDF-fs: unknown compression code (0) [ 1364.680806][T17219] loop2: detected capacity change from 0 to 64 [ 1364.734101][T17217] loop4: detected capacity change from 0 to 2048 [ 1364.824884][T17219] Trying to free block not in datazone [ 1364.834114][T17217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1365.671486][T17219] Trying to free block not in datazone [ 1365.677119][T17219] Trying to free block not in datazone [ 1365.683101][T17219] Trying to free block not in datazone [ 1365.689039][T17219] minix_free_block (loop2:6): bit already cleared [ 1365.766008][T17227] loop5: detected capacity change from 0 to 2048 [ 1365.829120][T17219] Trying to free block not in datazone [ 1365.834606][T17219] Trying to free block not in datazone [ 1365.883849][T17227] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1366.188907][T17227] NILFS (loop5): mounting unchecked fs [ 1366.211589][T17227] NILFS (loop5): recovery complete [ 1366.217763][T17229] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1366.285468][T17231] loop1: detected capacity change from 0 to 64 [ 1366.398140][T17231] Trying to free block not in datazone [ 1366.415441][T17233] loop4: detected capacity change from 0 to 1024 [ 1366.421591][T17231] Trying to free block not in datazone [ 1366.427249][T17231] Trying to free block not in datazone [ 1366.492950][T17231] Trying to free block not in datazone [ 1366.509301][T17233] EXT4-fs (loop4): Ignoring removed nobh option [ 1366.511070][T17231] minix_free_block (loop1:6): bit already cleared [ 1366.515565][T17233] EXT4-fs (loop4): Ignoring removed bh option [ 1366.634572][T17231] Trying to free block not in datazone [ 1366.730601][T17231] Trying to free block not in datazone [ 1366.736387][T17233] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1366.908896][T14788] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1366.999125][T17233] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1367.169080][T14788] usb 3-1: Using ep0 maxpacket: 16 [ 1367.171564][T17216] loop3: detected capacity change from 0 to 32768 [ 1367.211499][T17216] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1367.221419][T17216] BTRFS info (device loop3): max_inline at 0 [ 1367.227902][T17216] BTRFS info (device loop3): allowing degraded mounts [ 1367.242970][T17216] BTRFS info (device loop3): force zlib compression, level 3 [ 1367.281305][T17216] BTRFS info (device loop3): force clearing of disk cache [ 1367.288456][T17216] BTRFS info (device loop3): allowing degraded mounts [ 1367.289331][T14788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1367.341267][T17216] BTRFS info (device loop3): max_inline at 0 [ 1367.347276][T17216] BTRFS info (device loop3): using free space tree [ 1367.398869][T17216] BTRFS info (device loop3): has skinny extents [ 1367.510401][T14788] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1367.551363][T17252] loop1: detected capacity change from 0 to 64 [ 1367.558323][T14788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.567322][T14788] usb 3-1: Product: syz [ 1367.577400][T14788] usb 3-1: Manufacturer: syz [ 1367.592273][T14788] usb 3-1: SerialNumber: syz [ 1367.634709][T17252] Trying to free block not in datazone [ 1367.677731][T14788] usb 3-1: config 0 descriptor?? [ 1367.688238][T17252] Trying to free block not in datazone [ 1367.724412][T17252] Trying to free block not in datazone [ 1367.730920][T17252] Trying to free block not in datazone [ 1367.736386][T17252] minix_free_block (loop1:6): bit already cleared [ 1367.742954][T17252] Trying to free block not in datazone [ 1367.748423][T17252] Trying to free block not in datazone [ 1367.773148][T14788] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1367.782493][T14788] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1367.814864][T17216] BTRFS error (device loop3): open_ctree failed: -12 [ 1368.006362][ T4659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4659) [ 1368.399112][T14788] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1369.261841][T17237] xt_hashlimit: max too large, truncated to 1048576 [ 1369.348236][T14788] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1369.363966][T14788] em28xx 3-1:0.0: board has no eeprom [ 1369.521849][T17277] loop1: detected capacity change from 0 to 2048 [ 1369.617069][T17267] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1369.626504][T14788] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1369.673511][T14788] em28xx 3-1:0.0: dvb set to bulk mode. [ 1369.684046][T14788] usb 3-1: USB disconnect, device number 76 [ 1369.690971][T14788] em28xx 3-1:0.0: Disconnecting em28xx [ 1369.704407][T17269] em28xx 3-1:0.0: Binding DVB extension [ 1370.194583][T17267] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1370.282194][T17269] em28xx 3-1:0.0: Registering input extension [ 1370.288445][T14788] em28xx 3-1:0.0: Closing input extension [ 1370.299935][T14788] em28xx 3-1:0.0: Freeing device [ 1370.531589][T17277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1371.947712][T17307] device batadv0 entered promiscuous mode [ 1371.955880][T17307] device vlan2 entered promiscuous mode [ 1377.714901][T17378] netlink: 'syz.5.3238': attribute type 10 has an invalid length. [ 1378.507779][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.675134][T17378] device bridge_slave_1 left promiscuous mode [ 1379.019195][T17144] Bluetooth: hci1: command 0x0406 tx timeout [ 1379.392170][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.628805][T17378] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1380.204013][T17407] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 1380.216689][T17407] hfsplus: unable to find HFS+ superblock [ 1380.232047][T17407] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1380.456348][T17407] cramfs: wrong magic [ 1383.878470][T17412] ubi31: attaching mtd0 [ 1383.894356][T17412] ubi31: scanning is finished [ 1383.899122][T17412] ubi31: empty MTD device detected [ 1384.082269][T17412] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1384.756232][T17419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.784494][T17419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1384.983077][T17419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1385.052405][T17419] device bridge_slave_0 left promiscuous mode [ 1385.058705][T17419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.242421][T17419] device bridge_slave_1 left promiscuous mode [ 1385.250636][T17419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.610747][T17419] bond0: (slave bond_slave_0): Releasing backup interface [ 1385.641586][T17419] bond0: (slave bond_slave_1): Releasing backup interface [ 1385.844940][T17419] team0: Port device team_slave_0 removed [ 1385.867759][T17419] team0: Port device team_slave_1 removed [ 1385.874348][T17419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.882478][T17419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.892968][T17419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.901173][T17419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.918112][T17428] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 1386.014371][T17428] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1386.031233][T17435] [U] Ž [ 1386.449132][T14777] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1386.572262][T17145] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1386.729203][T14777] usb 5-1: Using ep0 maxpacket: 8 [ 1386.828999][T17145] usb 6-1: Using ep0 maxpacket: 8 [ 1386.949288][T17145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1386.964854][T17145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1386.979963][T17145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1387.059114][T14777] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1387.872104][T14777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.883642][T14777] usb 5-1: Product: syz [ 1387.887903][T14777] usb 5-1: Manufacturer: syz [ 1387.897569][T14777] usb 5-1: SerialNumber: syz [ 1387.905125][T14777] usb 5-1: config 0 descriptor?? [ 1387.951090][T14777] gspca_main: se401-2.14.0 probing 047d:5003 [ 1387.960720][T17462] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1387.986815][T17462] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1387.998986][T17145] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1388.014485][T17145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.026842][T17145] usb 6-1: Product: syz [ 1388.039927][T17145] usb 6-1: Manufacturer: syz [ 1388.078280][T17145] usb 6-1: SerialNumber: syz [ 1388.118377][T17145] usb 6-1: config 0 descriptor?? [ 1388.398954][T14777] gspca_se401: ExtraFeatures: 187 [ 1388.537593][T14777] gspca_se401: Too many frame sizes [ 1389.116506][T14777] usb 5-1: USB disconnect, device number 71 [ 1389.134872][T17269] usb 6-1: USB disconnect, device number 41 [ 1391.263004][T17506] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1393.804552][T17520] UBIFS error (pid: 17520): cannot open "", error -22 [ 1395.211753][T17533] IPv6: Can't replace route, no match found [ 1395.797036][T17540] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1395.986741][T17540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1395.996750][T17540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1396.004433][T17540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1396.014164][T17540] device bridge_slave_0 left promiscuous mode [ 1396.021255][T17540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.057450][T17540] device bridge_slave_1 left promiscuous mode [ 1396.746914][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.959303][T17540] bond0: (slave bond_slave_0): Releasing backup interface [ 1396.997620][T17540] bond0: (slave bond_slave_1): Releasing backup interface [ 1398.607166][T17540] team0: Port device team_slave_0 removed [ 1398.686218][T17540] team0: Port device team_slave_1 removed [ 1398.719113][T17540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.736380][T17540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.759425][T17540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.775049][T17540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.827461][T17546] netlink: 'syz.1.3292': attribute type 10 has an invalid length. [ 1398.853201][T17546] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1399.150791][T17578] IPv6: Can't replace route, no match found [ 1400.169538][T17589] UBIFS error (pid: 17589): cannot open "", error -22 [ 1406.641565][T17627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1408.143781][T17653] capability: warning: `syz.4.3320' uses 32-bit capabilities (legacy support in use) [ 1408.211749][T17653] program syz.4.3320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.474146][T17669] netlink: 'syz.5.3323': attribute type 10 has an invalid length. [ 1412.996170][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1413.565405][T17708] UBIFS error (pid: 17708): cannot open "", error -22 [ 1413.855877][T17724] overlayfs: failed to clone upperpath [ 1416.184023][T17742] netlink: 'syz.2.3344': attribute type 10 has an invalid length. [ 1419.469238][T17790] IPVS: length: 78 != 8 [ 1420.997640][T17802] netlink: 'syz.4.3360': attribute type 10 has an invalid length. [ 1421.037653][T17800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1421.131255][T17800] SET target dimension over the limit! [ 1421.165023][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.205751][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.258924][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.288313][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.303008][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.399612][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.409571][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.420508][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.430650][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1421.441787][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1421.451698][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1421.479323][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1421.495032][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1421.520879][T17814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1422.721463][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.727836][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.599004][T14785] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1425.078804][T14785] usb 2-1: Using ep0 maxpacket: 16 [ 1425.198939][T14785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.240524][T14785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.266725][T14785] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1425.284662][T14785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.315336][T14785] usb 2-1: config 0 descriptor?? [ 1425.759568][T17872] IPVS: length: 78 != 8 [ 1426.408985][T14785] usbhid 2-1:0.0: can't add hid device: -71 [ 1426.473362][T14785] usbhid: probe of 2-1:0.0 failed with error -71 [ 1426.535558][T14785] usb 2-1: USB disconnect, device number 92 [ 1426.848970][T14777] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1427.224455][T14777] usb 3-1: config 0 has no interfaces? [ 1427.496260][T14777] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1427.507520][T14777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.518832][T14777] usb 3-1: Product: syz [ 1427.523026][T14777] usb 3-1: Manufacturer: syz [ 1427.527795][T14777] usb 3-1: SerialNumber: syz [ 1427.544330][T14777] usb 3-1: config 0 descriptor?? [ 1428.911548][T17875] __nla_validate_parse: 9 callbacks suppressed [ 1428.911565][T17875] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3382'. [ 1428.939378][T17875] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1429.118148][T14777] usb 3-1: USB disconnect, device number 77 [ 1429.869209][ T6469] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1430.113703][ T6469] usb 5-1: Using ep0 maxpacket: 16 [ 1430.239568][ T6469] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1430.258022][ T6469] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.293268][ T6469] usb 5-1: config 0 has no interface number 0 [ 1430.459082][ T6469] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1430.468142][ T6469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.493775][ T6469] usb 5-1: Product: syz [ 1430.511610][ T6469] usb 5-1: Manufacturer: syz [ 1430.524507][ T6469] usb 5-1: SerialNumber: syz [ 1430.537736][ T6469] usb 5-1: config 0 descriptor?? [ 1430.580994][ T6469] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1430.593764][ T6469] usb 5-1: No valid video chain found. [ 1430.727885][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3406'. [ 1430.741476][T17961] SET target dimension over the limit! [ 1430.809405][ T6469] usb 5-1: USB disconnect, device number 72 [ 1431.140880][ T26] audit: type=1326 audit(1747625022.806:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17968 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36dabb969 code=0x7ffc0000 [ 1431.212198][ T26] audit: type=1326 audit(1747625022.806:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17968 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fa36dabb969 code=0x7ffc0000 [ 1431.268809][ T26] audit: type=1326 audit(1747625022.806:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17968 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36dabb969 code=0x7ffc0000 [ 1431.402111][T17979] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1431.463611][T17979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1436.095543][T18022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3427'. [ 1436.141599][T18022] SET target dimension over the limit! [ 1437.263878][T18043] netlink: 'syz.3.3433': attribute type 10 has an invalid length. [ 1438.228301][T18050] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1438.477707][T18050] kvm: pic: non byte read [ 1438.483927][T18050] kvm: pic: level sensitive irq not supported [ 1438.484067][T18050] kvm: pic: non byte read [ 1439.348046][T18078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3439'. [ 1440.245659][ T5205] Bluetooth: hci3: command 0x0406 tx timeout [ 1441.020515][T18086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1441.043876][T18086] SET target dimension over the limit! [ 1443.018916][T17144] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1443.555226][T18123] chnl_net:caif_netlink_parms(): no params data found [ 1443.807453][T18123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.826991][T18123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.861903][T18123] device bridge_slave_0 entered promiscuous mode [ 1443.938905][T17144] usb 6-1: config 252 has an invalid interface number: 107 but max is 0 [ 1443.942268][T18123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.012935][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.081757][T18123] device bridge_slave_1 entered promiscuous mode [ 1444.577085][T18123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.633659][T17144] usb 6-1: config 252 has no interface number 0 [ 1444.648798][T17144] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1444.671598][T18123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.672024][T17144] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1444.780508][T18123] team0: Port device team_slave_0 added [ 1444.790194][T18123] team0: Port device team_slave_1 added [ 1444.833587][T18123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.868988][T17144] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 1444.878189][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.896534][T17144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.925857][T17144] usb 6-1: Product: syz [ 1444.928315][T18123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.930089][T17144] usb 6-1: Manufacturer: syz [ 1444.930109][T17144] usb 6-1: SerialNumber: syz [ 1445.271057][ T5206] Bluetooth: hci4: command 0x0409 tx timeout [ 1445.555634][ T5206] usb 6-1: USB disconnect, device number 42 [ 1445.974235][T18123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.993839][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.305362][T18123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.117674][T18123] device hsr_slave_0 entered promiscuous mode [ 1447.139498][T18123] device hsr_slave_1 entered promiscuous mode [ 1447.156360][T18123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.186121][T18123] Cannot create hsr debugfs directory [ 1447.338833][ T5206] Bluetooth: hci4: command 0x041b tx timeout [ 1447.387145][T18188] sctp: [Deprecated]: syz.5.3473 (pid 18188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1447.387145][T18188] Use struct sctp_sack_info instead [ 1449.426544][T17144] Bluetooth: hci4: command 0x040f tx timeout [ 1451.236288][T18123] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1451.267060][T18123] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1451.282635][T18123] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1451.298084][T18123] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1451.408899][ T6469] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1451.486578][T18123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.516027][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1451.525063][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1451.544134][T18123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.562065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1451.585000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1452.293170][T17145] Bluetooth: hci4: command 0x0419 tx timeout [ 1452.423583][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.430735][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.467027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1452.533093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1452.541540][ T6469] usb 3-1: config 252 has an invalid interface number: 107 but max is 0 [ 1452.568849][ T6469] usb 3-1: config 252 has no interface number 0 [ 1452.575114][ T6469] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1452.601254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1452.639262][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.646320][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.658803][ T6469] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1452.714714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1452.744132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1452.762749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1452.773457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1452.782466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1452.799824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1452.816740][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'. [ 1452.843480][T18123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1452.855487][T18123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1452.871403][ T6469] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 1452.890662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1452.898565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1452.907825][ T6469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.920442][ T6469] usb 3-1: Product: syz [ 1452.925435][ T6469] usb 3-1: Manufacturer: syz [ 1452.931696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1452.939669][ T6469] usb 3-1: SerialNumber: syz [ 1453.134385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1453.143971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1453.571960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1453.683385][T17269] usb 3-1: USB disconnect, device number 78 [ 1453.787327][T18256] tipc: Started in network mode [ 1453.812889][T18256] tipc: Node identity 7, cluster identity 4711 [ 1453.824962][T18256] tipc: Node number set to 7 [ 1453.838214][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1453.846362][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1453.872834][T18123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.006952][T18265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1455.574743][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1455.899247][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1455.912787][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1455.958542][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1456.082221][T18300] syz.2.3501 sent an empty control message without MSG_MORE. [ 1456.978685][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1457.020672][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1457.044392][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1457.102364][T18123] device veth0_vlan entered promiscuous mode [ 1457.137255][T18302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1457.343941][T18123] device veth1_vlan entered promiscuous mode [ 1457.728907][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1457.744638][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1457.760345][T18123] device veth0_macvtap entered promiscuous mode [ 1457.777367][T18123] device veth1_macvtap entered promiscuous mode [ 1457.905852][T18123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.916449][T18123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.930252][T18123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.940924][T18123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.950945][T18123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.961438][T18123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.972709][T18123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.984195][T18123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.995609][T18123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.006317][T18123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.017532][T18123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.029031][T18123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.044733][T18123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.309567][T18326] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3510'. [ 1459.005334][T18123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.016769][T18123] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.028376][T18123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.037555][T18123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.046453][T18123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.068892][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1459.077407][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1459.143423][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1459.153291][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1459.162911][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1459.172128][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1460.438759][ T9962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.449697][ T9962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.482865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1461.355786][T18353] device veth0 entered promiscuous mode [ 1461.370174][T18353] device veth0 left promiscuous mode [ 1461.701115][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.735547][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.787860][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1466.094782][T18404] device veth0 entered promiscuous mode [ 1466.122002][T18404] device veth0 left promiscuous mode [ 1468.667894][T18448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3544'. [ 1469.095085][T18443] SET target dimension over the limit! [ 1470.350267][T18468] device veth0 entered promiscuous mode [ 1470.912392][T18468] device veth0 left promiscuous mode [ 1471.068071][T18480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1472.009057][T18500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3558'. [ 1472.266167][T18500] SET target dimension over the limit! [ 1476.050466][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 1476.834873][T18546] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3571'. [ 1477.258761][T18574] sch_tbf: peakrate 1024 is lower than or equals to rate 11700716898150976755 ! [ 1479.730597][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3596'. [ 1479.820275][T18622] SET target dimension over the limit! [ 1479.839271][T14785] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1480.099141][T14785] usb 7-1: Using ep0 maxpacket: 8 [ 1480.399450][T14785] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1480.474938][T14785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.488879][T14785] usb 7-1: Product: syz [ 1480.493171][T14785] usb 7-1: Manufacturer: syz [ 1480.498142][T14785] usb 7-1: SerialNumber: syz [ 1480.522995][T14785] usb 7-1: config 0 descriptor?? [ 1480.849456][T14785] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1481.288842][T17144] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1481.318897][T14785] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1481.929167][T14785] usb 7-1: USB disconnect, device number 2 [ 1482.245770][T18668] device veth0 entered promiscuous mode [ 1482.277281][T18668] device veth0 left promiscuous mode [ 1482.382330][T18678] syz.2.3610 uses obsolete (PF_INET,SOCK_PACKET) [ 1482.438923][T17144] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 1482.448274][T17144] usb 6-1: config 0 has no interface number 0 [ 1482.491489][T17144] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1482.729585][T17144] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1482.761353][T17144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.777709][T18690] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1482.884440][T17144] usb 6-1: Product: syz [ 1482.955999][T17144] usb 6-1: Manufacturer: syz [ 1483.036797][T17144] usb 6-1: SerialNumber: syz [ 1483.234858][T17144] usb 6-1: config 0 descriptor?? [ 1483.330361][T18645] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1483.711752][T17144] usb 6-1: MIDIStreaming interface descriptor not found [ 1483.731519][T18697] Cannot find del_set index 0 as target [ 1483.802958][T17144] usb 6-1: USB disconnect, device number 43 [ 1484.140733][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.148570][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.223539][T18694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3614'. [ 1485.581733][T18721] device veth0 entered promiscuous mode [ 1485.621906][T18721] device veth0 left promiscuous mode [ 1487.844971][T18749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3632'. [ 1489.714811][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3641'. [ 1490.126619][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3641'. [ 1493.833444][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1494.268575][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1495.248244][T18846] dlm: no local IP address has been set [ 1495.256054][T18846] dlm: cannot start dlm midcomms -107 [ 1499.281130][T17144] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1499.558839][T17144] usb 5-1: Using ep0 maxpacket: 16 [ 1500.528967][T17144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.618638][T17144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.630481][T17144] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1500.644333][T17144] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1501.305501][T17144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.315571][T17144] usb 5-1: config 0 descriptor?? [ 1501.579083][T18949] sp0: Synchronizing with TNC [ 1501.596904][T18947] [U] è [ 1502.583108][T18954] netlink: 'syz.5.3687': attribute type 10 has an invalid length. [ 1503.258411][T18954] team0: Device hsr_slave_0 failed to register rx_handler [ 1503.329377][T18960] sctp: [Deprecated]: syz.3.3691 (pid 18960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1503.329377][T18960] Use struct sctp_sack_info instead [ 1503.351288][T17144] usbhid 5-1:0.0: can't add hid device: -71 [ 1503.362212][T17144] usbhid: probe of 5-1:0.0 failed with error -71 [ 1503.462579][T17144] usb 5-1: USB disconnect, device number 73 [ 1505.982736][T19008] sctp: [Deprecated]: syz.4.3706 (pid 19008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1505.982736][T19008] Use struct sctp_sack_info instead [ 1511.360035][T19071] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1512.532959][T19086] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1515.248334][T19123] QAT: Stopping all acceleration devices. [ 1515.452907][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 1516.505929][T19135] device vti0 entered promiscuous mode [ 1517.036966][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1517.056902][T19140] SET target dimension over the limit! [ 1518.720343][T19162] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1518.797254][T19176] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 1518.808640][T19176] hfsplus: unable to find HFS+ superblock [ 1518.824423][T19176] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1518.839005][T19176] cramfs: wrong magic [ 1522.848038][T19207] SET target dimension over the limit! [ 1528.228456][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3789'. [ 1528.307434][T19275] SET target dimension over the limit! [ 1532.552788][T19334] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1534.372563][T19346] ipt_CLUSTERIP: Please specify destination IP [ 1534.569389][T19354] sctp: [Deprecated]: syz.3.3812 (pid 19354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1534.569389][T19354] Use struct sctp_sack_info instead [ 1535.319439][T19355] UBIFS error (pid: 19355): cannot open "./file0", error -22 [ 1535.907102][T19361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3814'. [ 1535.955374][T19361] SET target dimension over the limit! [ 1542.530582][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3843'. [ 1543.967227][T19455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3847'. [ 1543.988227][T19455] device wlan0 entered promiscuous mode [ 1544.014447][T19455] device wlan0 left promiscuous mode [ 1545.580726][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.587104][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.139543][T19483] device veth0 entered promiscuous mode [ 1547.476001][T19484] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1547.728581][T19493] device veth0 left promiscuous mode [ 1548.886787][T19517] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1548.900654][T19517] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1548.921135][T19518] sctp: [Deprecated]: syz.4.3862 (pid 19518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1548.921135][T19518] Use struct sctp_sack_info instead [ 1548.976515][T19517] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1549.016448][T19517] CIFS mount error: No usable UNC path provided in device string! [ 1549.016448][T19517] [ 1549.038869][T19517] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1551.740873][T19529] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1553.434656][T19533] ALSA: mixer_oss: invalid OSS volume '' [ 1555.045668][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3874'. [ 1555.398225][T19571] sctp: [Deprecated]: syz.5.3877 (pid 19571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1555.398225][T19571] Use struct sctp_sack_info instead [ 1560.394533][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3895'. [ 1561.248067][T19627] SET target dimension over the limit! [ 1562.836437][T19671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1564.013938][T19696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1564.039687][T19690] SET target dimension over the limit! [ 1568.699156][T19731] sp0: Synchronizing with TNC [ 1568.838229][ T5011] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1569.383424][T16951] Bluetooth: hci4: command 0x0406 tx timeout [ 1569.538848][ T5011] usb 3-1: device descriptor read/all, error -71 [ 1569.862904][T19747] NILFS (nullb0): couldn't find nilfs on the device [ 1570.818855][T19750] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1570.888130][T19750] kvm: pic: non byte read [ 1570.904161][T19750] kvm: pic: level sensitive irq not supported [ 1570.904235][T19750] kvm: pic: non byte read [ 1571.216178][T19759] device veth0 entered promiscuous mode [ 1571.264235][T19759] device veth0 left promiscuous mode [ 1572.404709][T19773] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1572.916177][T19798] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1573.021747][ T6469] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1573.036782][ T6469] Bluetooth: hci5: Injecting HCI hardware error event [ 1573.045673][T19801] kvm: pic: non byte read [ 1573.061642][T19801] kvm: pic: level sensitive irq not supported [ 1573.062480][T19801] kvm: pic: non byte read [ 1573.079663][ T9738] Bluetooth: hci5: hardware error 0x00 [ 1573.603728][T19808] device veth0 entered promiscuous mode [ 1573.647075][T19807] device veth0 left promiscuous mode [ 1574.677239][T19815] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 1576.677691][T19834] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1576.698937][ T9454] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1576.720006][T19834] kvm: pic: non byte read [ 1576.724831][T19834] kvm: pic: level sensitive irq not supported [ 1576.724893][T19834] kvm: pic: non byte read [ 1577.594575][T19848] device veth0 entered promiscuous mode [ 1577.602139][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3964'. [ 1577.694352][T19847] device veth0 left promiscuous mode [ 1577.702726][T19854] loop6: detected capacity change from 0 to 524287999 [ 1577.730389][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1577.741594][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1577.749582][ T9454] usb 7-1: Using ep0 maxpacket: 16 [ 1577.750658][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1577.765640][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1577.891177][ T9454] usb 7-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 1577.904540][ T9454] usb 7-1: too many endpoints for config 0 interface 0 altsetting 42: 230, using maximum allowed: 30 [ 1577.917778][ T9454] usb 7-1: config 0 interface 0 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1577.946710][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1577.950496][ T9454] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1577.957713][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1577.973436][T19863] loop_set_status: loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) has still dirty pages (nrpages=1) [ 1578.024034][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1578.034984][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1578.141318][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1578.152354][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1578.267670][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1578.278713][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1578.312778][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1578.323828][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1578.436651][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1578.448318][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1578.470797][T19854] ldm_validate_partition_table(): Disk read failed. [ 1578.535285][ T9454] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1578.545407][ T9454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.555485][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1578.566402][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1578.575978][ T9454] usb 7-1: config 0 descriptor?? [ 1578.611899][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1578.622812][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1578.704335][T19854] Dev loop6: unable to read RDB block 0 [ 1578.727875][T19854] loop6: unable to read partition table [ 1578.834088][T19854] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 1579.108805][ T9454] usb 7-1: string descriptor 0 read error: -71 [ 1579.458390][ T9454] usb 7-1: USB disconnect, device number 3 [ 1579.515433][T19883] trusted_key: encrypted_key: key user:syz not found [ 1580.409939][T19898] device veth0 entered promiscuous mode [ 1580.477994][T19897] device veth0 left promiscuous mode [ 1583.428979][T17145] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1583.472060][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 1583.630986][T19935] device veth0 entered promiscuous mode [ 1583.650355][T19934] device veth0 left promiscuous mode [ 1584.219248][T17145] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1584.231976][T17145] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1584.242182][T17145] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1584.254231][T17145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.639349][T17145] usb 5-1: can't set config #27, error -71 [ 1584.722182][T17145] usb 5-1: USB disconnect, device number 74 [ 1586.435601][T19967] tmpfs: Unknown parameter 'usrquota' [ 1586.482161][T19970] device veth0 entered promiscuous mode [ 1586.490252][T19969] device veth0 left promiscuous mode [ 1586.528892][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 1588.808195][T20018] device veth0 entered promiscuous mode [ 1588.834579][T20017] device veth0 left promiscuous mode [ 1589.703881][ T27] INFO: task syz.1.3387:17885 blocked for more than 144 seconds. [ 1589.824875][ T27] Not tainted 5.15.183-syzkaller #0 [ 1589.830825][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1589.839932][ T27] task:syz.1.3387 state:D stack:27944 pid:17885 ppid: 16061 flags:0x00004004 [ 1589.849424][ T27] Call Trace: [ 1589.852876][ T27] [ 1589.855910][ T27] __schedule+0x11b8/0x43b0 [ 1589.860631][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1589.866678][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1589.873120][ T27] ? lock_chain_count+0x20/0x20 [ 1589.878102][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 1589.883307][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1589.888844][ T27] schedule+0x11b/0x1e0 [ 1589.893121][ T27] schedule_preempt_disabled+0xf/0x20 [ 1589.898641][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 1589.912257][ T27] ? down_write_killable_nested+0x90/0x90 [ 1589.930820][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1589.936357][ T27] ? __rwlock_init+0x140/0x140 [ 1589.941581][ T27] ? ksys_sync+0x150/0x150 [ 1589.946151][ T27] down_read+0x96/0x2e0 [ 1589.950841][ T27] ? ksys_sync+0x150/0x150 [ 1589.955381][ T27] iterate_supers+0xa4/0x1d0 [ 1589.975697][ T27] ksys_sync+0x91/0x150 [ 1590.153727][ T27] ? sync_filesystem+0x220/0x220 [ 1590.172466][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 1590.191974][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1590.214403][ T27] __ia32_sys_sync+0xa/0x10 [ 1590.232901][ T27] do_syscall_64+0x4c/0xa0 [ 1590.248037][ T27] ? clear_bhb_loop+0x15/0x70 [ 1590.267943][ T27] ? clear_bhb_loop+0x15/0x70 [ 1590.284928][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1590.306117][ T27] RIP: 0033:0x7f2f69590969 [ 1590.320883][ T27] RSP: 002b:00007f2f673f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1590.354362][ T27] RAX: ffffffffffffffda RBX: 00007f2f697b7fa0 RCX: 00007f2f69590969 [ 1590.386009][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1590.412170][ T27] RBP: 00007f2f697b7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1590.441285][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.466804][ T27] R13: 0000000000000000 R14: 00007f2f697b7fa0 R15: 00007fff48d064e8 [ 1590.496882][ T27] [ 1590.512064][ T27] INFO: task syz.1.3387:17886 blocked for more than 145 seconds. [ 1590.543630][ T27] Not tainted 5.15.183-syzkaller #0 [ 1590.563321][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1590.595057][ T27] task:syz.1.3387 state:D stack:28776 pid:17886 ppid: 16061 flags:0x00004004 [ 1590.625573][ T27] Call Trace: [ 1590.642360][ T27] [ 1590.652621][ T27] __schedule+0x11b8/0x43b0 [ 1590.667496][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1590.692300][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1590.713308][ T27] ? lock_chain_count+0x20/0x20 [ 1590.729872][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 1590.749916][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1590.767479][ T27] schedule+0x11b/0x1e0 [ 1590.771808][ T27] schedule_preempt_disabled+0xf/0x20 [ 1590.777262][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 1590.783367][ T27] ? down_write_killable_nested+0x90/0x90 [ 1590.789233][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1590.794631][ T27] ? __rwlock_init+0x140/0x140 [ 1590.799532][ T27] ? ksys_sync+0x150/0x150 [ 1590.803966][ T27] down_read+0x96/0x2e0 [ 1590.808132][ T27] ? ksys_sync+0x150/0x150 [ 1590.812648][ T27] iterate_supers+0xa4/0x1d0 [ 1590.817262][ T27] ksys_sync+0x91/0x150 [ 1590.821568][ T27] ? sync_filesystem+0x220/0x220 [ 1590.826775][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 1590.848767][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1590.854011][ T27] __ia32_sys_sync+0xa/0x10 [ 1590.858606][ T27] do_syscall_64+0x4c/0xa0 [ 1590.872966][ T27] ? clear_bhb_loop+0x15/0x70 [ 1590.877668][ T27] ? clear_bhb_loop+0x15/0x70 [ 1590.882494][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1590.888404][ T27] RIP: 0033:0x7f2f69590969 [ 1590.892963][ T27] RSP: 002b:00007f2f673d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1590.901476][ T27] RAX: ffffffffffffffda RBX: 00007f2f697b8080 RCX: 00007f2f69590969 [ 1590.909615][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1590.917626][ T27] RBP: 00007f2f697b8080 R08: 0000000000000000 R09: 0000000000000000 [ 1590.927085][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.935286][ T27] R13: 0000000000000001 R14: 00007f2f697b8080 R15: 00007fff48d064e8 [ 1590.944553][ T27] [ 1590.947635][ T27] INFO: task syz.1.3387:17887 blocked for more than 145 seconds. [ 1590.956219][ T27] Not tainted 5.15.183-syzkaller #0 [ 1590.962109][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1590.970848][ T27] task:syz.1.3387 state:D stack:29088 pid:17887 ppid: 16061 flags:0x00004004 [ 1590.980424][ T27] Call Trace: [ 1590.983754][ T27] [ 1590.986746][ T27] __schedule+0x11b8/0x43b0 [ 1590.991438][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1590.997397][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1591.003480][ T27] ? lock_chain_count+0x20/0x20 [ 1591.008374][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 1591.014317][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1591.020211][ T27] schedule+0x11b/0x1e0 [ 1591.024418][ T27] schedule_preempt_disabled+0xf/0x20 [ 1591.030733][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 1591.036318][ T27] ? down_write_killable_nested+0x90/0x90 [ 1591.042120][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1591.048098][ T27] ? __rwlock_init+0x140/0x140 [ 1591.053588][ T27] ? ksys_sync+0x150/0x150 [ 1591.058044][ T27] down_read+0x96/0x2e0 [ 1591.062254][ T27] ? ksys_sync+0x150/0x150 [ 1591.066671][ T27] iterate_supers+0xa4/0x1d0 [ 1591.072932][ T27] ksys_sync+0x91/0x150 [ 1591.077091][ T27] ? sync_filesystem+0x220/0x220 [ 1591.082051][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 1591.088046][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1591.093377][ T27] __ia32_sys_sync+0xa/0x10 [ 1591.097885][ T27] do_syscall_64+0x4c/0xa0 [ 1591.102351][ T27] ? clear_bhb_loop+0x15/0x70 [ 1591.107027][ T27] ? clear_bhb_loop+0x15/0x70 [ 1591.111786][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1591.117798][ T27] RIP: 0033:0x7f2f69590969 [ 1591.122238][ T27] RSP: 002b:00007f2f673b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1591.130768][ T27] RAX: ffffffffffffffda RBX: 00007f2f697b8160 RCX: 00007f2f69590969 [ 1591.138809][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1591.146909][ T27] RBP: 00007f2f697b8160 R08: 0000000000000000 R09: 0000000000000000 [ 1591.155604][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.164131][ T27] R13: 0000000000000001 R14: 00007f2f697b8160 R15: 00007fff48d064e8 [ 1591.172210][ T27] [ 1591.175312][ T27] [ 1591.175312][ T27] Showing all locks held in the system: [ 1591.183453][ T27] 1 lock held by khungtaskd/27: [ 1591.188303][ T27] #0: ffffffff8c11bea0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1591.197900][ T27] 1 lock held by klogd/3535: [ 1591.202778][ T27] #0: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1591.212786][ T27] 2 locks held by getty/3931: [ 1591.217460][ T27] #0: ffff88802bc18098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1591.227233][ T27] #1: ffffc900026362e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 1591.237459][ T27] 1 lock held by syz-executor/4174: [ 1591.242677][ T27] #0: ffff88805f0a60e0 (&type->s_umount_key#70){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1591.253523][ T27] 4 locks held by kworker/u4:10/4281: [ 1591.261081][ T27] #0: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1591.271579][ T27] #1: ffffffff8c11bea0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1591.280963][ T27] #2: ffff888063734d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa0/0x10b0 [ 1591.290593][ T27] #3: ffffffff8c11bea0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1591.299954][ T27] 2 locks held by kworker/u4:15/5024: [ 1591.305341][ T27] 1 lock held by syz.1.3387/17885: [ 1591.310494][ T27] #0: ffff88805f0a60e0 (&type->s_umount_key#70){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 1591.320659][ T27] 1 lock held by syz.1.3387/17886: [ 1591.325769][ T27] #0: ffff88805f0a60e0 (&type->s_umount_key#70){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 1591.335902][ T27] 1 lock held by syz.1.3387/17887: [ 1591.341039][ T27] #0: ffff88805f0a60e0 (&type->s_umount_key#70){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 1591.351224][ T27] [ 1591.354277][ T27] ============================================= [ 1591.354277][ T27] [ 1591.362730][ T27] NMI backtrace for cpu 0 [ 1591.367050][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.183-syzkaller #0 [ 1591.375010][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1591.385047][ T27] Call Trace: [ 1591.388307][ T27] [ 1591.391225][ T27] dump_stack_lvl+0x168/0x230 [ 1591.395896][ T27] ? show_regs_print_info+0x20/0x20 [ 1591.401084][ T27] ? load_image+0x3b0/0x3b0 [ 1591.405600][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 1591.410744][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 1591.415679][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1591.421821][ T27] ? _printk+0xcc/0x110 [ 1591.425984][ T27] ? load_image+0x3b0/0x3b0 [ 1591.430491][ T27] ? load_image+0x3b0/0x3b0 [ 1591.434987][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1591.441048][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1591.447038][ T27] watchdog+0xe0f/0xe50 [ 1591.451189][ T27] kthread+0x436/0x520 [ 1591.455265][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1591.460317][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1591.464926][ T27] ret_from_fork+0x1f/0x30 [ 1591.469384][ T27] [ 1591.473141][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1591.478367][ C1] NMI backtrace for cpu 1 [ 1591.478377][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.183-syzkaller #0 [ 1591.478392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1591.478401][ C1] RIP: 0010:lock_is_held_type+0x4c/0x190 [ 1591.478421][ C1] Code: 3d ec b8 c7 03 00 0f 84 03 01 00 00 65 8b 05 db 59 61 76 85 c0 0f 85 f4 00 00 00 65 48 8b 1d 8b 50 61 76 83 bb ec 0a 00 00 00 <0f> 85 df 00 00 00 41 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f [ 1591.478435][ C1] RSP: 0018:ffffc90000d67aa8 EFLAGS: 00000046 [ 1591.478448][ C1] RAX: 0000000000000000 RBX: ffff88813fe30000 RCX: e4e152c4eb31ef00 [ 1591.478459][ C1] RDX: 0000000000000001 RSI: 00000000ffffffff RDI: ffff8880b913a318 [ 1591.478470][ C1] RBP: 00000000ffffffff R08: 0000000000000004 R09: 0000000000000003 [ 1591.478479][ C1] R10: fffff520001acf54 R11: 1ffff920001acf54 R12: dffffc0000000000 [ 1591.478490][ C1] R13: dffffc0000000000 R14: ffff8880b913b058 R15: ffff88807defd940 [ 1591.478502][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1591.478515][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1591.478526][ C1] CR2: 00007f762c992ab8 CR3: 000000002ab3c000 CR4: 00000000003506e0 [ 1591.478539][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1591.478548][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1591.478558][ C1] Call Trace: [ 1591.478562][ C1] [ 1591.478571][ C1] set_next_task_rt+0x92/0x590 [ 1591.478589][ C1] pick_next_task_rt+0xc0/0x130 [ 1591.478605][ C1] __schedule+0x12ac/0x43b0 [ 1591.478624][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1591.478643][ C1] ? lock_chain_count+0x20/0x20 [ 1591.478665][ C1] ? lock_chain_count+0x20/0x20 [ 1591.478680][ C1] ? tick_nohz_idle_exit+0xfb/0x540 [ 1591.478694][ C1] ? tick_nohz_idle_exit+0x40c/0x540 [ 1591.478708][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1591.478723][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1591.478735][ C1] ? flush_smp_call_function_from_idle+0x113/0x230 [ 1591.478750][ C1] ? generic_smp_call_function_single_interrupt+0x10/0x10 [ 1591.478766][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 1591.478783][ C1] schedule_idle+0x4a/0x90 [ 1591.478795][ C1] do_idle+0x556/0x5b0 [ 1591.478811][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1591.478825][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1591.478844][ C1] cpu_startup_entry+0x14/0x20 [ 1591.478863][ C1] start_secondary+0x31f/0x430 [ 1591.478880][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 1591.478898][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 1591.478918][ C1] [ 1591.480174][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1591.738245][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.183-syzkaller #0 [ 1591.746204][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1591.756244][ T27] Call Trace: [ 1591.759519][ T27] [ 1591.762441][ T27] dump_stack_lvl+0x168/0x230 [ 1591.767129][ T27] ? show_regs_print_info+0x20/0x20 [ 1591.772329][ T27] ? load_image+0x3b0/0x3b0 [ 1591.776838][ T27] panic+0x2c9/0x7f0 [ 1591.780726][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1591.786349][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1591.790853][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1591.796419][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 1591.802576][ T27] watchdog+0xe4e/0xe50 [ 1591.806731][ T27] kthread+0x436/0x520 [ 1591.810793][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1591.815832][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1591.820435][ T27] ret_from_fork+0x1f/0x30 [ 1591.824860][ T27] [ 1591.828143][ T27] Kernel Offset: disabled [ 1591.832475][ T27] Rebooting in 86400 seconds..